Kibana MCP Server
Kibana instance data access for MCP clients via API-based integrations.
Data last scanned yesterday · Reviewed last month
Overview
This server provides an interface between MCP-compatible clients and Kibana, leveraging the Elastic Stack 8.x OpenAPI specification. It enables users to interact with their Kibana instance using natural language or programmatic requests to retrieve data and perform operations supported by the underlying API.
Our verdict
With a security score of 40/100, this tool is categorized as high risk. The score reflects that the server is community-maintained rather than an official Elastic product, and crucial security aspects—such as OAuth, read-only modes, and authentication methods—have not yet been editorially reviewed. It is suitable for experimental setups but should be used with caution in environments handling sensitive production data.
- TypeScript implementation with 11 direct dependencies.
- Supports both stdio and HTTP transport modes.
- Licensed under the permissive Apache-2.0 license.
- Lacks editorial security review for core features.
- Missing verification of read-only and authentication security.
- Not an official product of Elastic.
Setup
{
"mcpServers": {
"mcp-server-kibana": {
"args": [
"-y",
"@tocharianou/mcp-server-kibana"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| get_status | Get Kibana server status | low |
| execute_kb_api | Execute custom Kibana API requests | high |
| get_available_spaces | List available Kibana spaces | low |
| search_kibana_api_paths | Search API endpoints | low |
| list_all_kibana_api_paths | List all API endpoints | low |
| get_kibana_api_detail | Get API endpoint details | low |
| vl_search_saved_objects | Search saved objects (universal) | low |
| vl_get_saved_object | Get single saved object | low |
| vl_create_saved_object | Create new saved object | medium |
| vl_update_saved_object | Update single saved object | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What authentication methods are supported for connecting to Kibana?
You can connect using an API Key, Basic Authentication (username and password), or session cookies.
›Does this server support remote access or only local connections?
The server supports both standard stdio transport for local use and an HTTP transport mode for remote access.
›How can I configure the server to work with multiple Kibana spaces?
You can specify the target Kibana space by setting the KIBANA_DEFAULT_SPACE environment variable in your configuration.
›Is it possible to use this server with a custom CA certificate?
Yes, you can configure a custom CA certificate path using the KIBANA_CA_CERT environment variable.
›Can I perform bulk operations on saved objects?
Yes, the server provides tools for bulk updates and bulk deletions of saved objects.
›What is the recommended way to integrate this server with Claude Desktop?
Add the server configuration to your Claude Desktop config file using npx to execute the package directly with the required environment variables.
Alternatives
Changelog
- Fixv0.9.0 - MCP SDK 1.29.0 Upgrade
2026-07-19
- Fix
- Security
- Improvedv0.7.2
2026-02-02
- Security
- Improvedv0.6.2
2026-02-01
Badge
Maintain this server? Add the live badge to your README.